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VERIFYING A NODE ON A NETWORK 
This application claims the benefit of U.S. provisional application 60/414,944 filed 
on 30 September 2002. 

TECHNICAL FIELD 

5 This invention relates to the field of communications security, and in particular, to a 

system and method that verifies the proximity of a node on a network. 

BACKGROUND ART 
Network security can often be enhanced by distinguishing between local' nodes and 
'remote' nodes on the network. Local nodes, for example, are typically located within a 
10 particular physical environment, and it can be assumed that users within this physical 
environment are authorized to access the network. Remote nodes, on the other hand, are 
susceptible to unauthorized physical access. Additionally, unauthorized intruders on a 
network typically access the network remotely, via telephone or other communication 
channels. Because of the susceptibility of the network to unauthorized access via remote 
15 nodes, network security can be enhanced by imposing stringent security measures, or 
access restrictions, on remote nodes, while not encumbering local nodes with this same 
restrictions. 

DISCLOSURE OF INVENTION 
It is an object of this invention to provide a system and method that facilitates a 
20 determination of whether a node on a network is local or remote. It is a further object of 
this invention to provide a system and method that facilitates a secure determination of 
whether a node on a network is local or remote. It is a further object of this invention to 
integrate this determination with a system or method that verifies the authenticity of the 
node on the network. 

25 These objects and others are achieved by a system and method that includes timing 

parameters within a node -verification protocol, such as the Open Copy Protection System 
(OCPS), to facilitate a determination of the proximity of a target node to a source node. 
The node-verification protocol includes a query-response sequence, wherein the source 
node communicates a query to the target node, and the target node communicates a 

30 corresponding response to the source node. The source node establishes a lower bound on 
the distance between the source node and the target node, based on a measure of the time 
required to effect this query-response sequence. The time required to effect this sequence 
includes the time required to communicate the query and response, as well as the time 
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required to process the query and generate the response. The target node includes a 
measure of the time required to process the query and generate the response to the source 
node. The source node subtracts this time from the total query-response time to determine 
the time consumed for the communication. This communication time is compared to a 
5 threshold value to determine whether the target node is local or remote relative to the 
source node. 

BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 illustrates an example block diagram of a network of nodes. 

FIG. 2 illustrates an example block diagram of a source and target node that effect a query- 

1 0 response protocol in accordance with this invention. 

Throughout the drawings, the same reference numeral refers to the same element, or an 
element that performs substantially the same function. 

BEST MODE FOR CARRYING OUT THE INVENTION 
FIG. 1 illustrates an example block diagram of a network 150 of nodes 110. One of 

15 the nodes, NodeD 1 10, is illustrated as being distant from the other nodes 110. In 

accordance with this invention, each of the nodes 1 10 is configured to be able to determine 
the proximity of each other node 1 10. In a typical embodiment of this invention, the 
proximity determination is limited to a determination of whether the other node is "local" 
or "remote", although a more detailed determination of distances can be effected using the 

20 techniques disclosed herein. 

FIG. 2 illustrates an example block diagram of a source node 1 10S and target node 
1 10T that effect a query-response protocol to determine the proximity of the target node 
1 10T to the source node 1 1 OS in accordance with this invention. The source node 1 10S 
includes a processor 210 that initiates a query, and a communications device 220 that 

25 transmits the query to the target node 1 10T. The target node HOT receives the query and 
returns a corresponding response, via its communications device 230. To assure that the 
response corresponds to the communicated query, the protocol calls for the target node 
1 10T to process at least a portion of the query and to include a result of this processing in 
the response, via a processor 240. 

30 The source node 1 1 OS is configured to measure the time consumed by the query- 

response process, illustrated in FIG. 2 as T que ry-response 280. This query-response time 280 
includes the time to communicate the query and response, T com municate 260, as well as the 
time to process the query and generate the response at the target node 1 10T, T process 270. In 
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accordance with this invention, the target node 1 10T is configured to include a measure of 
this processing time 270 within the response provided to the source node 1 10S. The source 
node 1 10S subtracts the processing time 270 from the query-response time 280 to 
determine the communication time 260. Using known techniques, the distance between the 
5 source 1 10S and target HOT can be calculated using this determined communication time 
260. As noted above, in a typical embodiment, the communication time 260 is used to 
determine whether the target 1 10T is local or remote from the source 1 10S. This 
determination is made in a preferred embodiment of this invention by comparing the 
communication time 260 to a nominal threshold value, typically not more than a few 

10 milliseconds. If the communication time 260 is below the threshold, the target 1 10T is 
determined to be local; otherwise, it is determined to be remote. 

In a typical embodiment, the source 1 10S uses the remote/local proximity 
determination to control subsequent communications with the target HOT. For example, 
some files may be permitted to be transferred only to local nodes, all communications with 

15 a remote node may be required to be encrypted, and so on. Optionally, multiple threshold 
levels may be defined to distinguish different ranges of distances, such as whether a remote 
target node is located within the same country as the source node, and so on. 

Note that an unauthorized node can subvert the above process by providing a false 
processing time. In a preferred embodiment of this invention, the above query-response 

20 process is integrated within a node-authentication process, such as a key-exchange process, 
which typically includes one or more query-response sequences. By integrating the query- 
response process within the node-authentication process, the reported processing time is 
verified as being authentic. 

The OCPS protocol, for example, includes an authentication stage, a key exchange 

25 stage, a key generation phase, and subsequent data transmission phases. The key exchange 
phase is effected via a modified Needham-Schroeder key exchange protocol, as described 
in "Handbook of Applied Cryptography", Menezes et al. 

At the authentication stage, each of the source 1 10S and target HOT nodes 
authenticates a public key of each other. 

30 At the start of the key exchange phase, the source 1 10S encrypts a random number 

and a random key, using the public key of the target HOT, and transmits both encryptions 
to the target HOT. In accordance with this invention, the source node 1 10S initiates a timer 
when these encryptions are transmitted to the target HOT. 
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The target HOT decrypts the random number and random key, using the private 
key of the target. The target HOT generates a new random number and a new random key, 
and encrypts the new random number, the new random key, and the decrypted random 
number from the source 1 10S, using the public key of the source 1 10S, to form a response 
5 that is to be communicated to the source 1 10S. The target HOT optionally signs the 

response, using the target's private key. In accordance with this invention, the target HOT 
also includes a measure of the time required to effect the decryption, encryption, and 
signing within the signed response. This processing time is optionally encrypted using the 
public key of the source. Because this decryption, encryption, and signing process 

10 generally consumes the same amount of time at a given target node, the target node is 
preferably configured to provide a predefined processing time as the measure of time to 
effect this processing. By signing the response, the target HOT binds the reported 
processing time to the other parameters in the current response, thereby precluding an 
unauthorized replacement of the encrypted processing time with an alternative time that is 

15 encrypted using the public key of the source 1 10S. 

When the source node 1 10S receives the response, it terminates the aforementioned 
timer. The source node 1 10S verifies the signed message, using the public key of the target 
HOT, and decrypts the random numbers and random key from the response, using the 
private key of the source 1 1 OS. If the processing time within the response is encrypted, it is 

20 also decrypted at this time by the source 1 10S, using the private key of the source 1 10S. In 
accordance with this invention, the source 1 10S subtracts the processing time from the time 
duration measured by the timer between the transmission of the encrypted query from the 
source 1 10S and the reception of the encrypted response from the target 1 10T to determine 
the round-trip communication time between source 1 10S and target HOT. 

25 To confirm the key exchange, the source 1 10S transmits the decrypted new random 

number back to the target HOT. Both the source 1 10S and target HOT control subsequent 
communications based upon receipt of the proper decrypted random numbers. In 
accordance with this invention, the source 1 10S also controls subsequent communications 
based upon the determined communication time. 

30 If both nodes are verified, subsequent communications between the source 1 10S 

and target HOT encrypt the communications using a session key that is a combination of 
the random keys, the public keys, and a session index. 
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The foregoing merely illustrates the principles of the invention. It will thus be 
appreciated that those skilled in the art will be able to devise various arrangements which, 
although not explicitly described or shown herein, embody the principles of the invention 
and are thus within its spirit and scope. For example, in the above described OCPS 
5 protocol, the target node HOT may also be configured to determine the proximity of the 
source node 1 10S, by timing the process between the transmission of the encrypted 
response and the receipt of the decrypted random number from the source 1 1 OS. In this 
embodiment, the source 1 1 OS is configured to include a measure of the time required to 
process the encrypted response and transmit the decrypted random number in the last key 

10 exchange message that includes the decrypted random number, digitally signed by the 
source 1 10S. The target HOT subtracts this processing time from its measured time 
between transmission and receipt to determine the round-trip target-source-target 
communication time, and thus the proximity of the source 1 1 OS to the target HOT. These 
and other system configuration and optimization features will be evident to one of ordinary 

15 skill in the art in view of this disclosure, and are included within the scope of the following 
claims. 
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CLAIMS: 

1 . A method of determining proximity of a target node to a source node, comprising: 

communicating a query from the source node to the target node, 
communicating a response from the target node to the source node, 

the response from the target node including a measure of processing time 
required to generate the response based on the query, 
receiving the response at the source node, 

determining a measure of query-response time between communicating the query 
and receiving the response, and 

determining the proximity of the target node based on a communication time that 
depends upon a difference between the measure of query-response time and the measure of 
processing time. 

2. The method of claim 1, wherein 

the query and response correspond to at least a portion of a cryptographic key- 
exchange protocol. 

3. The method of claim 2, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 

4. The method of claim 1, wherein 

the query and response correspond to at least a portion of an OCPS protocol. 

5. The method of claim 1, wherein 

the measure of processing time at the target node is predefined. 

6. The method of claim 1, wherein 

determining the proximity includes comparing the communication time to a 
threshold value that distinguishes between local and remote nodes. 
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7. The method of claim 1, further including 

restricting communications with the target node based on the proximity. 

8. The method of claim 1, wherein 

the response is crypto graphically signed by the target node. 

9. A node on a network including: 

a communication device that is configured to receive a query from a source node 
and to transmit a corresponding response to the source node, 

a processor that is configured to process the query and produce therefrom the 
response, 

wherein 

the response includes a measure of processing time required to process the query 
and produce the response. 

10. The node of claim 9, wherein 

the processor is configured to process the query and produce the response as part of 
a cryptographic key-exchange protocol. 

1 1 . The node of claim 10, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 

12. The node of claim 9, wherein 

the query and response correspond to at least a portion of an OCPS protocol 
initiated by the source node. 

13. The node of claim 9, wherein 

the measure of processing time is predefined. 

14. The node of claim 9, wherein 

the processor is further configured to crypto graphically sign the response. 



7 



US020358 



15. A node on a network including: 

a communication device that is configured to transmit a query to a target node and 
to receive a corresponding response from the target node, 

the response from the target node including a measure of processing time 
required to generate the response at the target node, and 
a processor that is configured to: 
generate the query, 
receive the response, 

measure a query-response time between generating the query and receiving 
the response, and 

determine a proximity of the target node relative to the node based on a 
communication time that is dependent upon a difference between the query-response time 
and the measure of processing time. 

16. The node of claim 15, wherein 

the processor is configured to generate the query and receive the response as part of 
a cryptographic key-exchange protocol. 

17. The node of claim 16, wherein 

the key-exchange protocol corresponds to a Needham-Schroeder key-exchange 
protocol. 

18. The node of claim 15, wherein 

the query and response correspond to at least a portion of an OCPS protocol 
initiated by the node. 

19. The node of claim 15, wherein 

the measure of processing time is predefined. 

20. The node of claim 15, wherein 

the processor is configured to determine the proximity based on a comparison of 
the communication time to a threshold value that distinguishes between local and remote 
nodes. 
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21. The node of claim 15, wherein 

the processor is further configured to control subsequent communications with the 
target node based on the proximity. 
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ABSTRACT 

A system and method includes timing parameters within a node -verification 
protocol, such as OCPS, to facilitate a determination of the proximity of a target node to a 
source node. The node-verification protocol includes a query-response sequence, wherein 
5 the source node communicates a query to the target node, and the target node 

communicates a corresponding response to the source node. The source node establishes a 
lower bound on the distance between the source node and the target node based on a 
measure of the time required to effect this query-response sequence. The time required to 
effect this sequence includes the time required to communicate the query and response, as 

10 well as the time required to process the query and generate the response. The target node 
includes a measure of the time required to process the query and generate the response to 
the source node. The source node subtracts this time from the total query-response time to 
determine the time consumed for the communication. This communication time is 
compared to a threshold value to determine whether the target node is local or remote 

15 relative to the source node. 
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